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Top Stories 

• A California man and 3 other individuals were convicted January 16 in a scheme that 
defrauded 200 people out of more than $3 million through fake oil-well investments in 
Kentucky from mid-2012 through August 2014. - Lexington Herald-Leader (See item 2) 

• Two Delta Airlines plane sharing the same flight number were deplaned and searched at 
John F. Kennedy International Airport in New York January 19 after a bomb threat was 
made for Delta flight 468. - WCBS 2 New York City (See item 6) 

• More than 160 miles of eastbound lanes on Interstate 84 in Oregon was closed for several 
hours January 17 following a 26-car pileup that involved 12 semi-trucks and over 50 
vehicles due to icy road conditions. - Portland Oregonian (See item 10) 

• An advisory was issued to residents in Glendive, Montana, against ingesting water after oil 
was detected in the city’s public water supply following a January 17 pipeline break that 
caused up to 50,000 gallons of oil to spill along the Yellowstone River. - CBS News; 
Associated Press (See item 24) 
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Energy Sector 



1. January 19, Greenwich Time - (North Dakota) Company says 260-barrel oil spill 
caused by vandalism. Petro-Hunt L.L.C. reported January 19 that a 260-barrel oil spill 
at an oil well site near Watford City was due to vandalism after an individual came on 
site, broke the seals on the tank valves, and opened them. Authorities are investigating 
the incident after the oil was contained and recovered at the site. 

Source: http://www.greenwichtime.com/business/energv/article/Cornpanv-savs-260- 
barrel-oil-spill-caused-by-6025628.php 

2. January 18, Lexington Herald-Leader - (National) California man is convicted in $3 
million Kentucky oil-well scheme. A California man was found guilty January 16 for 
conducting a plan that defrauded 200 people out of more than $3 million through fake 
oil-well investments in Kentucky from mid-2012 through August 2014. Three other 
individuals were also charged in the scheme which included utilizing documents that 
included fake geological surveys to make it appear that the wells were producing 
substantial amounts of oil and that the sites had large reserves. 

Source: http://www.kentuckv.com/2015/01/18/3648594 calif omia-man-is-convicted- 
in.html 

3. January 18, KOMO 4 Seattle - (Washington) Over 65,000 people in the dark as 
windstorm powers through region. Utility crews worked to restore power to about 
65,000 customers in western Washington January 18 after strong wind gusts knocked 
out service. 

Source: http://www.komonews.com/news/local/Over-65QOO-people-in-the-dark-as- 
windstorm-powers-through-region-288963241.html 

For another story, see item 24 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. January 19, Help Net Security - (National) 2+ million US cars can be hacked remotely, 
researchers claim. A researcher with Digital Bond Labs presented a vulnerability that he 
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identified at the S4 conference in Miami when he reverse-engineered the Snapshot tracking 
dongle offered by Progressive Insurance that is currently in use in over 2 million vehicles across 
the U.S. that could allow the attacker to control some of the core functions of a car by 
compromising its on-board system via Snapshot remotely due to minimal security in the 
firmware. 

Source: http://www.net-security.org/secworld.php ?id=17840 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

Nothing to report 
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Transportation Systems Sector 

5. January 20, WCAU 10 Philadelphia - (Pennsylvania) 1 dead, 30 hurt in massive 1-76 
pileup in Montgomery County. Westbound lanes on 1-76 in Upper Merion, 
Pennsylvania, were closed for more than 4 hours January 18 after a 56 vehicle pileup 
that left 1 person dead and 30 others injured due to icy road conditions. 

Source: http://www.nbcphiladelphia.com/news/local/25-Vehicle-Crash-on-Interstate- 
76-in-Mongtomerv-County-288958611.html 

6. January 19, WCBS 2 New York City - (New York) Police swarm JFK after alleged 
bomb threat directed at landing Delta flight. An alleged bomb threat that was called 
in for a Delta Air Lines flight 468 landing at John F. Kennedy International Airport in 
New York January 20 prompted officials to search two Delta planes sharing the same 
flight number, with one moved to a remote area of the airport to rescreen luggage for 
potential explosive devices. Both flights were cleared when nothing suspicious was 
found. 

Source: http://newvork.cbslocal.com/201 5/01/1 9/police-swarm-ifk-after-alleged-bomb- 
threat-directed-at-landing-delta- flight/ 

7. January 19, KVUE 24 Austin - (Texas) Upper deck SB 1-35 reopens after animal 
waste spill. The southbound upper deck of Interstate 35 in Austin was closed for 
approximately 5 hours January 19 during clean up following an animal waste spill. 
Source: http://www.kvue.com/story/news/2015/01/19/upper-deck-sb-i-35-shut-down- 
due-to-animal-waste- spill/22007 519/ 

8. January 18, WTIC 61 Hartford - (Connecticut) Bradley International Airport 
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reopens after closing for icy conditions. Bradley International Airport in Connecticut 
was closed for about 2 hours January 18 due to icy conditions which prompted a dozen 
flights to be delayed. 

Source: http://foxct.com/2015/01/18/bradlev-international-airport-reopens-after- 
closing-briefly-for-icy-conditions/ 

9. January 18, KP1X 5 San Francisco - (California) Windshield crack forces Oakland- 
to-Honolulu flight to divert to Mineta San Jose airport. A Hawaiian Airlines flight 
from Oakland to Hawaii was rerouted to San Jose Mineta Airport in California January 
18 for an emergency landing due to a crack in the windshield. Crews worked to repair 
the windshield while passengers were placed on another flight. 

Source: http://sanfrancisco.cbslocal.com/2015/01/18/windshield-crack-forces- 
hawaiian-airlines-flight-to-divert-to-san-iose-airport/ 

10. January 17, Portland Oregonian - (Oregon) Interstate 84 finally reopened after 
massive 26-car pileup closes it for most of day. More than 160 miles of eastbound 
lanes on Interstate 84 from Pendleton to Ontario were closed for several hours January 
17 following a massive 26-car pileup that involved 12 semi-trucks and trapped over 50 
vehicles due to icy road conditions. Twelve people were injured and treated at local 
hospitals. 

Source: http://www.oregonlive.com/pacific-northwest- 
news/index.ssf/2015/01/interstate 84 finally reopened.html 

11. January 16, CNN - (National) FAA says safety inspectors can’t bypass security 
check points. The Federal Aviation Administration announced January 16 that it 
suspended a program which allowed safety inspectors to bypass the Transportation 
Security Administration’s security checkpoints after a series of recent security breaches 
involving firearms from airport personnel. 

Source: http://www.cnn.com/2015/01/16/us/tsa-checkpoints/ 

12. January 16, KTVX 4 Salt Lake City - (Utah) Downed power lines shut down 1-15 for 
4 hours in Davis County near Woods Cross. Downed power lines prompted the 4- 
hour closure of Interstate 15 in Davis County January 16. Police are investigating the 
incident after a witness reported a dump truck knocked down the power lines and drove 
off. 

Source: http://www.good4utah.eom/storv/d/story/downed-power-lines-shut-down-i-l 5- 
in-davis-county/32214/KW5qgmkEsked UawzWD5yg 
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Food and Agriculture Sector 

13. January 18, U.S. Food and Drug Administration - (International) Inventure Foods, 
Inc. issues voluntary recall of its Rader Farms Fresh Start Smoothie Blend, 
Sunrise Refresh Fusion, and Daily Power Fusion due to possible health risk. The 

U.S. Food and Drug Administration announced January 18 that Inventure Foods, Inc., 
issued a precautionary recall of its Rader Farms Fresh Start Smoothie Blend, Fresh 
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Start Sunrise Refresh Fusion, and Fresh Start Daily Power Fusion due to possible 
Listeria monocytogenes contamination. The affected products were distributed 
throughout several States and Canada. 

Source: http://www.fda.gov/Safety/Recalls/ucm430735.htm 

14. January 18, U.S. Department of Agriculture - (Florida; Georgia) Georgia firm recalls 
chicken and beef products due to misbranding and an undeclared allergen. The 
Food Safety and Inspection Service announced January 17 that Sentry Food Solutions 
recalled about 14,130 pounds of chicken and beef products after a spice supplier 
notified the company that the cumin in a spice mix used to formulate the products may 
have been contaminated with peanut allergens. The affected products were distributed 
for institutional use in Florida. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 5/recall-0 1 6-20 1 5-release 



15. January 18, U.S. Department of Agriculture - (International) Illinois firm recalls pork 
products produced without benefit of inspection. The Food Safety and Inspection 
Service reported January 17 that Kalle USA recalled about 168,473 pounds of pork 
products that were imported from Denmark because they were not presented at a 
Chicago, Illinois point of entry for Food Safety and Inspection Service re-inspection, 
posing possible adverse health consequences. The affected products were produced 
between October 18, 2013 and November 19, 2014 and were distributed in several 
States. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-01 5-201 5-release 



16. January 18, U.S. Department of Agriculture - (Illinois) Illinois firm recalls chicken 
products produced without adequate Ready-To-Eat HACCP plan and a Listeria 
Monocytogenes program. The Food Safety and Inspection Service reported January 
17 that La Guadalupana Wholesale, Inc., recalled approximately 8,856 pounds of its 
chicken tamales product because they were not produced under a fully implemented 
Ready-To-Eat (RTE) Hazard Analysis & Critical Control Points (HACCP) plan; a 
Listeria monocytogenes program; and a hazard analysis. The recalled product was 
distributed for retail sale in Chicago. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/201 5/recall-0 14-201 5-release 



17. January 18, U.S. Department of Agriculture - (International) California firm recalls 
pork products produced without benefit of inspection. Food Club Corp., issued a 
recall January 17 for about 3,233 pounds of pork products imported from Spain 
because they were not presented at the U.S. point of entry for inspection by the Food 
Safety and Inspection Service, posing possible health risks. The recalled products were 
shipped to customers via the Internet in California. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-01 3-201 5-release 
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18. January 17, U.S. Department of Agriculture - (National) Georgia firm recalls beef 
and chicken products due to misbranding and undeclared allergens. The Food 
Safety and Inspection Service announced January 16 a recall for about 869 pounds of 
Kabob’s Acquisition Inc. beef and chicken products that was initiated after a supplier 
notified the company that the ground cumin spice used during the products’ production 
may be contaminated with peanut residue. The recalled products were shipped to 
distribution centers in several States for shipment to catering firms. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-ai'chive/archi ve/20 1 5/recall-0 1 2-20 1 5-release 

19. January 17, U.S. Department of Agriculture - (Connecticut; New Jersey; New York) 
New York Firm recalls chorizo products due to misbranding and an undeclared 
allergen. The Food Safety and Inspection Service reported January 16 that Buffalo 
Provisions recalled about 48,210 pounds of chorizo product due to undeclared allergens 
after a supplier notified the company that the cumin in a spice mix used during 
manufacturing may be contaminated with peanut residue. The recalled products were 
sent to retail and wholesale locations in Connecticut, New Jersey, and New York. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 5/recall-0 11-20 1 5-release 

20. January 17, U.S. Department of Agriculture - (Georgia) Georgia firm recalls pork 
products due to misbranding and undeclared allergens. The Food Safety and 
Inspection Service announced January 16 that Heywood’s Meat Haus & Provision Co., 
recalled about 93 1 pounds of tasso (pork shoulder) products after the company’s 
ingredient supplier informed them that the ground cumin spice used during production 
contained undeclared peanut. The product was sold in 10-pound cases and shipped to 
restaurant locations in Georgia. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-ai'chive/archi ve/20 1 5/recall-0 1 0-20 1 5-release 

21. January 16, U.S. Food and Drug Administration - (Washington; Oregon) Queseria 
Bendita LLC recalls fresh cheeses and sour cream because of possible health risk. 
The U.S. Food and Drug Administration reported January 16 that Queseria Bendita 
LLC recalled all lots of its sour cream and Panela, Queso Fresco, Requeson, and Cotija 
fresh soft cheese products due to possible Listeria monocytogenes contamination. The 
recalled products yield a best by date up to April 16 and were sold at the company’s on- 
site store in Yakima, Washington, and distributed to Hispanic grocery stores in 
Washington and Oregon. 

Source: http://www.fda.gov/Safety/Recalls/ucm43Q730.htm 

22. January 16, U.S. Food and Drug Administration - (National) B&M, Inc. issues 
allergy alert on undeclared peanut protein in ground cumin and other seasonings 
sold at Target and the Fresh Market nationwide due to potential undeclared 
peanut protein. The U.S. Food and Drug Administration announced January 16 that 
B&M, Inc., recalled certain lots of Cumin Ground and Dark Chili Powder after a 
supplier notified the company that ground cumin used as an ingredient in the products 
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was potentially contaminated with peanut protein. The products were distributed to 
Target and The Fresh Market stores nationwide between December 1 and January 7. 
Source: http://www.fda.gov/Safety/Recalls/ucm43Q718.htm 

23. January 16, U.S. Food and Drug Administration - (National) B&M, Inc. issues 
allergy alert on undeclared peanut protein in ground seasonings sold at Harris 
Teeter in the southeast region due to potential undeclared peanut protein. The 

U.S. Food and Drug Administration reported January 16 that B&M, Inc., issued a recall 
for 3.7-ounce containers of Blue Cheese Jalapeno Seasoning after the company was 
notified by a supplier that ground cumin that was used during production of the 
seasoning may contain undeclared peanut. The product was distributed December 1 for 
sale at Harris Teeter stores in the southeast region of the U.S. 

Source: http://www.fda.gov/Safetv/Recalls/ucm430712.htm 
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Water and Wastewater Systems Sector 

24. January 20, CBS News; Associated Press - (Montana) Yellowstone River spill: Oil 
detected in water supplies. Preliminary testing detected oil in the city of Glendive’s 
public water supplies prompting officials to bring in drinking water for residents 
following a January 17 Bridger Pipeline LLC -owned pipeline break that caused up to 
50,000 gallons of oil to spill along the Yellowstone River in Montana. The pipeline 
remained shut down indefinitely while crews worked to contain the oil and officials 
continued to test the water. 

Source: http://www.cbsnews.com/news/vellowstone-river-spill-oil-detected-in-water- 
supplies/ 

25. January 20, Associated Press - (Washington) Wastewater biosolids spill into creek 
at Blewett Pass. A semi-truck overturned on Highway 97 in Blewett Pass January 19 
and spilled approximately 60,000 pounds of sewage biosolids into Swauk Creek 
prompting an advisory to stay out of the creek. Cleanup work continued January 20 
while Kittitas County health officials continued to monitor the spill. 

Source: http://www.sfgate.com/news/science/article/Wastewater-biosolids-spill-into- 
creek-at-Blewett-6026883.php 

26. January 20, Associated Press - (Pennsylvania) Police: Brothers stole $500,000 worth 
of sewer grates from Philadelphia suburbs. Two brothers were arrested January 17 
for allegedly stealing 13 sewer grates worth approximately $500,000 from parking lots 
in Philadelphia suburbs and selling them as scrap metal. 

Source: http://www.foxnews.com/us/2015/01/20/police-brothers-stole-50000Q-worth- 
sewer-grates-from-philadelphia-suburbs/ 

27. January 18, KVUE 24 Austin - (Texas) Cedar Park issues boil water notice for area 
affected by water break. The city of Cedar Park issued a boil water advisory after a 
water transmission main leak January 17 forced officials to shut off the water supply to 
more than 600 residents, including an apartment complex and several area businesses. 
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Source: http://www.kvue.com/story/news/local/2015/01/17/cedar-park-water-main- 
break-leaves-some-without-water/2 1925565/ 



T Return to top i 



Healthcare and Public Health Sector 

28. January 19, KNSD 39 San Diego - (California) Suspected case of measles closes 
urgent care center in Rancho Bernardo. The Sharp-Rees Rancho Bernardo Urgent 
Care center was closed for 6 hours January 19 after a patient entered the center with a 
suspected case of measles. Test samples were sent to health officials following an 
announcement by the County of San Diego Health and Human Services Agency that 
three new possible cases of measles in the county, potentially connected to an ongoing 
measles outbreak in the State, were being investigated. 

Source: http://www.nbcsandiego.com/news/local/Another-Suspected-Case-of-Measles- 
Closes-Sharps-Urgent-Care-Center-in-Rancho-Bernardo-289059071.html 

29. January 15, South Florida Sun-Sentinel - (Florida) Police: Juvenile posed as doctor 
at St. Mary’s hospital. West Palm Beach police questioned a juvenile for posing as a 
doctor for a month at St. Mary’s Medical Center in Florida after authorities received a 
call January 13 claiming an individual was walking around the medical center in a 
doctor’s lab coat carrying a stethoscope and informing patient and staff that he was a 
doctor. The juvenile’s parent informed police that the boy is under the care of a doctor 
for an undisclosed illness. 

Source: http://www.sun-sentinel.com/local/palm-beach/fl- west-palm-beach-fake-teen- 
doctor-201501 15-story.html 
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Government Facilities Sector 

30. January 16, Redding Record Searchlight - (California) DOJ: Brothers plead guilty to 
growing pot in national forest. Two men from Eureka pleaded guilty January 16 to 
conspiring to grow a combined 20,000 marijuana plants inside the Shasta-Trinity 
National Forest in California, causing the depredation of land. Clean up costs were 
estimated at $17,000 after authorities destroyed the plants at the grow sites. 

Source: http://www.redding.com/news/local-news/doi-brothers-plead-guilty-to- 
growing-pot-in-national-forest 

[ Return to top ] 

Emergency Services Sector 

Nothing to report 
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Information Technology Sector 



31. January 20, Securityweek - (International) VideoLan says flaws exist in codecs 
library, not VLC. A security researcher discovered two vulnerabilities in libavcodec, a 
free open-source audio/video codecs library used by VLC, Xine and MPlayer media 
players that could allow the attacker the ability to corrupt memory and exploit arbitrary 
code. 

Source: http://www.securitvweek.com/videolan-says-flaws-exist-codecs-librarv-not-vlc 

32. January 20, Securityweek - (International) CSRF flaw allowed attackers to hijack 
GoDaddy domains. A security researcher discovered that Internet domain registrar 
GoDaddy failed to implement any cross-site request forgery (CSRF) protections for 
many DNS management actions which an attacker could have exploited to edit 
nameservers, edit DNS records, and modify automatic renewal settings. GoDaddy took 
measures to fix the vulnerability and introduced CSRF protections for sensitive account 
actions January 19. 

Source: http://www.securitvweek.com/csrf-flaw-allowed-attackers-hiiack-godaddy- 
domains 

33. January 20, Softpedia - (International) Oracle addresses 167 bugs in critical patch 
update. Oracle released its quarterly Critical Patch Update January 20, closing 167 
vulnerabilities found in 48 of the company’s products. The developer’s Oracle Fusion 
Middleware product received 35 security patches, more than any other product, 
including 28 patches for vulnerabilities exploited remotely without authentication of the 
potential attacker. 

Source: http://news.softpedia.com/news/Oracle-Addresses-167-Bugs-In-Critical-Patch- 
Update-47 05 67 . shtml 

34. January 20, CNET News - (National) Verizon races out fix for email security 
flaw. Verizon patched a serious vulnerability in its My FiOS mobile app after a 
security researcher discovered a flaw that could allow a user to access any 
Verizon email account, scan the inbox, read individual emails, and send 
messages. 

Source: http://www.cnet.com/news/verizon-races-out-fix-for-email-security- 
flaw/ 



For another story, see item 4 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



35. January 17, Erie Times-News - (Pennsylvania) Tower climbing crew called in to 
work on WQLN radio outage. Crews worked to restore the signal to WQLN 91.3 FM 
Erie and all of the station’s translators after the station remained off the air January 17 
due to an unspecified problem which knocked out the signal January 15. 

Source: http://www.goerie.com/tower-climbing-crew-called-in-to-work-on-wqln-radio- 
outage 

For another story, see item 34 
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Commercial Facilities Sector 

36. January 20, KSAT 12 San Antonio - (Texas) Chaotic brawl, shooting leaves 2 dead, 4 
injured. Two individuals died and at least 4 others were injured January 19 when 
gunfire broke out during a brawl involving as many as 100 people at a carwash in San 
Antonio. Police continue to investigate the incident. 

Source: http://www.ksat.com/content/pns/ksat/news/2015/01/2Q/chaotic-brawl- 
shooting-leaves-two-dead— more-wounded.html 

37. January 19, Florida Today - (Florida) Florida mall reopens after fatal shooting. The 
Melbourne Square mall in Florida was evacuated and closed when a gunman opened 
fire inside the mall’s food court January 17, wounding an intended target and killing a 
second individual before the gunman died of a self-inflicted gunshot wound. 

Authorities recovered three handguns at the scene and continue to investigate the 
incident, while the shopping mall reopened for business January 18. 

Source: http://www.usatodav.com/story/news/nation/2015/01/18/florida-mall-reopens- 
after-fatal-shootin g/2 1957669/ 

38. January 19, WTOP 103.5 FM Washington, D.C. - (Maryland) Mont. Co. mall 
partially evacuated after freon leak. A Freon leak from a heating and cooling unit 
prompted an evacuation of an H&R Block tax preparation center and two restaurants at 
the Westfield Mall in Wheaton January 19. The businesses remained closed until the 
leak was capped and the Montgomery County Health Departments verified the area as 
safe. 

Source: http://wtop.com/montgomerv-countv/2015/01/mont-co-mall-partially- 
evacuated-freon-leak/ 

39. January 17, WLTX 19 Lexington - (South Carolina) Walmart in Lexington closed 
due to chemical odor. A Walrmat store in Fexington County was closed for several 
hours January 17 due to a strong chemical odor after an employee was cleaning a 
machine and mixed two chemicals that caused a reaction. HAZMAT crews and the 
South Carolina Department of Health and Human Services responded to clean up the 
chemicals. 

Source: http://www.wltx.com/storv/news/2015/01/17/walmart-in-lexington-closed-due- 
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to-chemical-odor/2 19 15077/ 



For another story, see item 27 
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Dams Sector 

Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 12 - 




